mlsanityData to 14 Oct 2026

Manitest: Are classifiers really invariant?

arXiv 1507.06535 ↗First posted 23 Jul 2015cs.CV cs.LG stat.MLcited by 27

Not on the map. Why?

Abstract (arXiv)

Invariance to geometric transformations is a highly desirable property of automatic classifiers in many image recognition tasks. Nevertheless, it is unclear to which extent state-of-the-art classifiers are invariant to basic transformations such as rotations and translations. This is mainly due to the lack of general methods that properly measure such an invariance. In this paper, we propose a rigorous and systematic approach for quantifying the invariance to geometric transformations of any classifier. Our key idea is to cast the problem of assessing a classifier's invariance as the computation of geodesics along the manifold of transformed images. We propose the Manitest method, built on the efficient Fast Marching algorithm to compute the invariance of classifiers. Our new method quantifies in particular the importance of data augmentation for learning invariance from data, and the increased invariance of convolutional neural networks with depth. We foresee that the proposed generic tool for measuring invariance to a large class of geometric transformations and arbitrary classifiers will have many applications for evaluating and comparing classifiers based on their invariance, and help improving the invariance of existing classifiers.

Key facts. Cited by 27 papers in the map (data through 14 Oct 2026). First posted on arXiv 23 Jul 2015.

Builds on

No reference list yet.

Built on by

Cited by year

Citing papers per year: 2021: 12; 2022: 10; 2023: 4; 2024: 0; 2025: 1.

27 papers.

Sort:

By area:

  1. 2021Editing a classifier by rewriting its prediction rulescited by 65
  2. 2021Inspect, Understand, Overcome: A Survey of Practical Methods for AI Safetycited by 35
  3. 2022Just Rotate it: Deploying Backdoor Attacks via Rotation Transformationcited by 20
  4. 2023Attacks in Adversarial Machine Learning: A Systematic Survey from the Life-cycle Perspectivecited by 20
  5. 2023A Survey of Robustness and Safety of 2D and 3D Deep Learning Models Against Adversarial Attackscited by 19
  6. 2022CausalAgents: A Robustness Benchmark for Motion Forecasting using Causal Relationshipscited by 18
  7. 2021Scale-invariant scale-channel networks: Deep networks that generalise to previously unseen scalescited by 17
  8. 2021Adversarial Examples on Segmentation Models Can be Easy to Transfercited by 15
  9. 2021Relative stability toward diffeomorphisms indicates performance in deep netscited by 12
  10. 2021Anti-aliasing Deep Image Classifiers using Novel Depth Adaptive Blurring and Activation Functioncited by 11
  11. 2022Measuring Representational Robustness of Neural Networks Through Shared Invariancescited by 11
  12. 2021AGKD-BML: Defense Against Adversarial Attack by Attention Guided Knowledge Distillation and Bi-directional Metric Learningcited by 10
15 more
  1. 2022Adversarially Robust Learning with Tolerancecited by 9
  2. 2021Contemplating real-world object classificationcited by 6
  3. 2021Generating Unrestricted Adversarial Examples via Three Parameterscited by 5
  4. 2022Certifying Model Accuracy under Distribution Shiftscited by 5
  5. 2022How deep convolutional neural networks lose spatial information with trainingcited by 5
  6. 2023Exploring Robust Features for Improving Adversarial Robustnesscited by 4
  7. 2022Generalization to translation shifts: a study in architectures and augmentationscited by 3
  8. 2021Natural Perturbed Training for General Robustness of Neural Network Classifierscited by 2
  9. 2021SHIFT15M: Fashion-specific dataset for set-to-set matching with several distribution shiftscited by 2
  10. 2022Resource-Efficient Invariant Networks: Exponential Gains by Unrolled Optimizationcited by 2
  11. 2025An Analysis of Causal Effect Estimation using Outcome Invariant Data Augmentationcited by 2
  12. 2022Verifying Attention Robustness of Deep Neural Networks against Semantic Perturbationscited by 1
  13. 2023Invariance Measures for Neural Networkscited by 1
  14. 2021Wiggling Weights to Improve the Robustness of Classifierscited by 0
  15. 2022Potential Auto-driving Threat: Universal Rain-removal Attackcited by 0